Every agent-payable API.

Token risk check API for Base (honeypot and scam token detector). Base token risk verdict for bots and agents in one fixed JSON: verdict (safe / caution / danger), risk_score 0-100 (higher is riskier) and signals for honeypot sell simulation, buy / sell / transfer tax, owner renounced and privileges (mint, pause, blacklist, tax change), upgradeable proxy, LP burn, top holders, verified source and age. Unknown when a source is down. Contract safety check, not financial advice.

Bulk token risk check API for Base (batch honeypot and rug scan). Batch Base token risk verdicts: up to 20 ERC-20 addresses in one call, priced per address, each with the same fixed JSON as /v1/verdict (verdict safe / caution / danger, risk_score 0-100, honeypot and tax simulation, owner privileges, proxy, LP, holders, verified, age; unknown when a source is down). Charged only when at least one address is checked. Contract safety check, not financial advice.

One tokenized real-world asset by id (gold, nvidia, tesla, spy ...): identity, type, image and web slug joined with its onchain market row - price, market cap, 24h volume and change in your currency. Two cached upstream reads, one answer. Use rwa-list to find the id.

One issuer of tokenized real-world assets by id: aggregate tokenized market cap, 24h cap change and 24h volume, plus every token it issues with symbol, name and contract address per platform (e.g. Coinbase's Base-chain tokenized Apple, Nvidia, Meta, Alphabet). Use rwa-issuers for ids. Cached in-process for 5 minutes.

The issuers behind tokenized real-world assets (Coinbase, Backpack Securities, Ondo, xStocks and the rest): id and name, for rwa-issuer. Cached in-process for 5 minutes.

Market data for tokenized real-world assets - tokenized stocks (Nvidia, Tesla, pre-IPO names), ETFs and commodities like gold - ranked by market cap or volume: price, market cap, 24h volume, 24h high/low and change, in your currency. Filter by type or a list of ids. Note these are the ONCHAIN wrappers' figures (what is tokenized and trading), not the underlying's exchange listing. Cached in-process for 60 seconds.

Every real-world asset with a tokenized onchain version that CoinGecko tracks: stocks, ETFs and commodities, with id, symbol, name and type. Filter by type or a name/symbol substring; ids feed rwa-markets and rwa-asset. Counts by type ride along. Cached in-process for 10 minutes.

Tokenized stock quote (?symbol=AAPLx&chain=solana)

Discover active Base tokens ranked by momentum, liquidity, and volume. Returns machine-readable market metrics plus report freshness and follow-up risk-check links.

Tokens trending across the market right now

Is this package safe to install? One call, one verdict: safe / caution / avoid, with a score, concrete reasons (known vulnerabilities from OSV, deprecation, abandonment, adoption, install scripts, typosquat signals) and a one-line recommendation. Input: name, ecosystem (npm | PyPI), optional version.

Cheapest check: does this Québec contractor hold an ACTIVE RBQ licence right now? Returns active true/false, licence number, name, NEQ, city, restriction flag and authorized work categories. Use to vet many contractors fast; use qc-contractor-check for RENA and penalties. Input: name, NEQ or RBQ licence number.

Company profile from a domain or name in ONE call, for sales and research agents: what the company does, industry, services, service area, address, phones and emails published by the company (each with the page it came from), social links, plus official screening (registries, US restricted-party lists). Read live from the company's own website, no third-party database. No website found = HTTP 404 = no charge. Input: domain or name, optional city, country, lang (en|fr). Busine

Sanctions screening only, cheapest tier: is this company on an official sanctions list? One call checks the US Consolidated Screening List (incl. OFAC SDN), the UK Sanctions List, the EU consolidated financial sanctions list and the Consolidated Canadian Autonomous Sanctions List (UN designations included as implemented by the UK and the EU), each refreshed daily. Returns a clear action (allow / review / block), a 0-100 risk score, matches with the official list references an

Summarize text (up to 40k chars) into a faithful, tight summary, with optional max_words and target language. Pay-per-call over x402 in USDC on Base; payment challenge answered in ~10 ms, 7-day average processing ~1.5 s across Tolca services.

Call before paying, onboarding or contracting a company (KYB). One call: US restricted-party lists (CSL incl. OFAC SDN), company registries (UK Companies House, Canada federal), legal entity status (GLEIF, worldwide), contractor licences (Québec, Washington, Oregon). Verdict ok / review / blocking / not_found with reasons. Input: name, optional country (ISO-2) and region (WA, OR, QC). Businesses only.

Translate text between French (including Quebec French) and English, with optional tone. Pay-per-call over x402 in USDC on Base; payment challenge answered in ~25 ms, 7-day average processing ~1.5 s across Tolca services.

Call before hiring, paying or subcontracting a Québec (Canada) contractor. One call checks: active RBQ licence (status, categories, restrictions), RENA listing (banned from public contracts), environmental penalties, federal PSPC ineligibility. Verdict ok / review / blocking with reasons and source dates. Input: name, NEQ or RBQ licence number. Official open data.

Is this company worth contacting FOR YOU? Everything in company-enrich, plus a fit verdict for your offer and goal: good / maybe / poor, a 0-100 score, reasons grounded in facts from the company's website, and an opening line that references one of those facts. Input: domain or name, plus for: { seller (who you are and what you sell), goal (sales | partnership | supplier | hiring | investment | other), optional ideal_customer }. No website found = no charge.

Turn messy text into clean JSON matching the schema you provide (field names and types). Pay-per-call over x402 in USDC on Base; payment challenge answered in ~5 ms, 7-day average processing ~1.5 s across Tolca services.

Fetch a public URL (HTML article, PDF, or JSON) and return JSON matching your schema in one call, with page title and source. Pay-per-call over x402 in USDC on Base; payment challenge answered in ~8 ms.

Search the web and read the top pages in ONE call: 10 results (title, url, snippet, date) plus the clean text of the best pages, with fetch time and sha256. French and Canada by default when the query is French; official-sources mode (governments, registries, courts, laws); freshness filter; site: restriction. No results = HTTP 404 = you are not charged. Input: query, optional read (0-5), official, lang, country, freshness, site.

Fetches a public URL, extracts all <script type="application/ld+json"> blocks, parses them as JSON, and returns the parsed objects along with a count. Useful for pulling schema.org structured data (Product, Article, Organization, etc.) from a web page.

Human or synthetic? Provenance evidence for a URL: archive first-capture date, domain age, authorship markup, curated source tier, AI disclosures and stylometric signals, aggregated into a calibrated 0-100 human-origin score with every piece of evidence. Add deep=true for an LLM stylometric assessment.

Answer from TRUSTED sources only (Wikipedia, Wikidata, arXiv, Crossref/DOI, World Bank): returns passages with URL, reliability tier and retrieval time for citation. With synthesize=true you also get an LLM answer that cites the passages and admits when they don't contain the answer.

Is this business real, and is its contact info live? Give an id, website, phone or name: matches it against the directory and runs live checks now (site up, name on site, phone on site, domain age, phone format). Returns evidence, score and verdict.

Offline validator for a Belgian National Register Number (Rijksregisternummer / Numéro de registre national), format YYMMDDXXXCC. Verifies the two check digits equal 97 minus (first nine digits mod 97), applying the +2,000,000,000 offset for persons born in year 2000 or later, and parses birth date, gender and sequence number.

Offline validator for a Swedish Organisationsnummer (company registration number). Normalizes input to 10 digits (accepts XXXXXX-XXXX or plain), checks length/digit-3 validity, and verifies the final check digit using the Luhn (mod 10) algorithm.

Offline validator for an Indian PAN (Permanent Account Number): normalizes input to uppercase, checks the 10-character AAAAA9999A pattern, and validates the 4th character against the known holder-type code enum (P=Individual, C=Company, H=HUF, F=Firm, A=AOP, T=Trust, B=BOI, L=Local Authority, J=Artificial Juridical Person, G=Government). Does not verify the undisclosed final check character.

Offline validator for a Dutch RSIN (Rechtspersonen Samenwerkingsverbanden Informatie Nummer), a 9-digit legal-entity tax identifier. Normalizes input (strips spaces/dots/dashes) and applies the elfproef (mod-11 check): weights 9,8,7,6,5,4,3,2 on the first 8 digits, minus the 9th digit, must be divisible by 11.

Offline validator for an Irish PPSN (Personal Public Service Number): checks the 7-digit + 1 check-letter (+ optional trailing 'A' or 'H' modifier letter) format and verifies the check letter using the published mod-23 weighted-sum algorithm (weights 8..2, optional modifier adds 9 or 72). Processes a single PPSN only; no network access or storage.

Offline validator for Brazilian CPF (individual) and CNPJ (company) registration numbers. Strips formatting, checks length, rejects known invalid sequences (all same digit), and recomputes the official modulo-11 check digits for both formats.

Offline validator for a Danish CVR-nummer (8-digit business registration number issued by the Danish Business Authority). Normalizes input to digits only, checks length and computes a modulus-11 checksum using weights 2,7,6,5,4,3,2 on the first 7 digits compared against the 8th check digit. Result is flagged as best-effort since some legacy CVR numbers do not conform to the checksum rule.

Exchange rate between two ISO currencies (ECB reference rates), optionally converting an amount. (GET: pass the input as query parameters)

Offline validator for an Italian Partita IVA (VAT number): verifies the value is 11 numeric digits and recomputes the Luhn-like check digit (digits in odd positions summed as-is, digits in even positions doubled with 9 subtracted if the result exceeds 9, total summed and complemented mod 10) to confirm it matches the 11th digit.

Offline validator/normalizer for a Danish CPR-nummer (personal identification number, format DDMMYY-SSSS). Checks digit count and date-of-birth validity, determines century from the 7th digit per official rules, and derives birth date and gender (last digit odd=male, even=female). Does not rely on the modulus-11 checksum since it has not been guaranteed valid for numbers issued since 2007.

Fetch any public web page (or PDF) and return clean, LLM-ready Markdown with title, metadata and links. Boilerplate, ads and scripts removed.

Offline validator for South American tax IDs: Argentine CUIT/CUIL (11-digit check digit algorithm), Chilean RUT (mod-11 check digit, 0-9 or K), and Colombian NIT (mod-11 verification digit with DIAN weights). Returns whether the check digit matches and a normalized/formatted value.

Offline validator for a Romanian CUI (company tax ID). Strips an optional 'RO' prefix, applies weights 7-5-3-2-1-7-3-2 to the digits preceding the check digit (right-to-left), sums the weighted products, multiplies by 10, takes mod 11 (mapping a remainder of 10 to 0), and compares the result to the supplied check digit.

Offline validator for an Austrian Firmenbuchnummer (FN), the company register number. Normalizes the numeric part (1-6 digits, left-padded to 6 for calculation), computes the modulo-11 check letter using weights 2,1,2,1,2,1 (Luhn-style digit reduction for products >=9 by subtracting 9) and the standard letter table (0=p,1=a,2=b,3=c,4=d,5=e,6=f,7=g,8=h,9=i,10=k), and compares it to the supplied check letter.

Offline validator for a Guatemalan CUI (Código Único de Identificación), the 13-digit national ID number. Parses the 13 digits into an 8-digit correlative, a 1-digit check digit, a 2-digit department code and a 2-digit municipality code, recomputes the check digit using the published weighted mod-11 formula (weights 2-9 over the 8 correlative digits, mod 11, 10→0) and compares it, returning validity plus the parsed components.

Offline validator for a Mexican RFC (Registro Federal de Contribuyentes). Checks the format for persona física (4 letters + 6-digit date + 3-char homoclave) or persona moral (3 letters + 6-digit date + 3-char homoclave), verifies the embedded date is a real calendar date, and returns the parsed birth/incorporation date. Pure string/date logic, no network calls.

Offline structural validator for a Vietnamese Enterprise/Tax Code (Mã số thuế, MST). Strips spaces, checks the 10-digit head-office pattern or the 13-character branch pattern (10 digits + '-' + 3-digit sequence). Uses regex only since the official modulus-11 check-digit weight table is not consistently published.

Offline validator for a Czech/Slovak rodné číslo (birth number). Normalizes input to YYMMDD/XXXX or YYMMDDXXX(X), checks the calendar-valid month/day (accounting for the +50 female and +20/70 post-2004 month offsets), and for 10-digit numbers confirms the full digit string (slash removed) is evenly divisible by 11. No network calls.

Offline structural validator for an Indian CIN (Corporate Identity Number, 21 characters). Parses and checks: listing status letter (L/U), 5-digit NIC industry code, 2-letter state code (against the known MCA state-code list), 4-digit incorporation year (plausible range), 3-letter company-type/ownership code (against a known enum like PLC, PTC, OPC, GOI, NPL, FTC, SGC, ULL, ULT), and 6-digit registration number. No checksum exists so this is a format-only check.

Check accrued tollbooth earnings for a payout wallet: credits owed and USD equivalent. Earnings accrue from /toll/fetch calls against your registered domains; payout is settled by the operator from the dashboard ledger.

Check up to 32 JSON argument values against a closed, declared scalar tool contract: types, required fields, code-point length and exact safe-integer bounds. Rounded fractions/underflow are not integers. Returns unknown fields and mismatches. No remote references, arbitrary patterns, tool execution or MCP conformance certification.

Review permission changes before an agent release. Compare two explicit allow-only sets by tool, action and exact resource; report additions, removals and wildcard additions. Does not resolve IAM inheritance or wildcard containment, or authorize execution.

MCP server monitoring API (24h checks, 30 days). Register a public remote MCP server URL and an https webhook: ToolFit re-audits the server every 24 hours for 30 days and POSTs an HMAC-SHA256 signed JSON notification when its tools/list fingerprint (pin) or grade changes, or it becomes unreachable or recovers. Returns watch_id, the signing secret (shown once) and the baseline. Unreachable URLs, blocked URLs or webhooks and a full watch list are never charged.

MCP server monitoring API (6h checks, 30 days). Same as POST /v1/watch, but the server is re-audited every 6 hours for 30 days. HMAC-SHA256 signed webhook on tools/list fingerprint or grade changes (and unreachable/recovered). Returns watch_id, the signing secret (shown once) and the baseline. Never charged for unreachable or blocked URLs or a full watch list. Search intents: mcp server monitoring, mcp uptime, mcp tool change alerts, mcp webhook alerts, watch mcp server, mcp drift monitor.